This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
File:                     74RV1AwuPbyyREb8yXoJ7Uut7cM.mft (raw, json)
Hash identifier:          wXt8sPLiRAj4vIWuTFI/neGsJ61by1JEJ3pmAoSkIPQ=
Subject key identifier:   C7:C4:01:D5:78:0E:B8:07:16:E4:68:1F:0D:81:A7:C6:83:92:D2:5A
Authority key identifier: EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3
Certificate issuer:       /CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
Certificate serial:       019B59AD239E442D8367F6F0EB76D14F06AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
Manifest number:          049D
Signing time:             Fri 26 Dec 2025 08:01:17 +0000
Manifest this update:     Fri 26 Dec 2025 08:01:17 +0000
Manifest next update:     Sat 27 Dec 2025 08:01:17 +0000
Files and hashes:         1: 619zNDqmtLKKCjzlIw8zZSm1ZZE.roa (hash: zZAwiAuYtnzM2ojN5bJH5pjkYxQOefSCs6lkaP9dQ7s=)
                          2: 74RV1AwuPbyyREb8yXoJ7Uut7cM.crl (hash: ZXrg6F4JrH3qo/3+BEdwN6De91kRdOgzP3amLL23Nls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:ad:23:9e:44:2d:83:67:f6:f0:eb:76:d1:4f:06:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
        Validity
            Not Before: Dec 26 08:01:17 2025 GMT
            Not After : Dec 27 08:01:17 2025 GMT
        Subject: CN=c7c401d5780eb80716e4681f0d81a7c68392d25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:af:38:63:42:fc:1e:1a:29:3b:21:ba:d8:
                    40:b7:6a:35:91:8c:57:3c:45:fb:8f:e4:e5:1e:e8:
                    d0:9e:21:cb:2b:e7:8b:4b:6e:0f:85:de:7a:e2:e1:
                    6f:72:17:9c:29:38:9c:9b:37:ac:8c:ab:91:ca:f5:
                    9e:38:d0:6f:46:12:f4:7a:14:1a:f9:5c:f1:ab:fe:
                    22:42:92:70:b0:fc:2c:96:f4:e1:8f:c7:f7:d5:05:
                    33:97:7a:30:58:24:7a:23:e4:a0:63:af:d3:ef:92:
                    75:e9:f7:6f:34:59:b8:aa:ac:19:46:ff:22:84:01:
                    4f:7e:ef:82:cb:c8:e6:15:8e:e5:17:55:5d:89:7a:
                    92:41:65:16:03:1f:1d:cb:7d:09:72:f4:b3:f3:ba:
                    ab:08:32:48:b4:45:f4:91:22:44:4e:e1:ee:74:70:
                    b1:64:b0:db:19:b4:11:91:78:2c:4a:c0:47:46:54:
                    8f:85:41:1c:97:3c:a2:27:94:8f:03:60:c9:37:84:
                    f9:8f:7b:41:15:b2:14:e6:25:bf:ae:29:06:7c:ac:
                    da:74:47:3e:72:ac:f8:b0:81:e8:79:83:95:22:b9:
                    e5:7a:56:49:ed:5e:99:a7:6d:b1:a3:e7:52:71:5f:
                    19:ca:b7:07:e0:3a:97:a5:ad:9d:a1:15:dd:32:ce:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C4:01:D5:78:0E:B8:07:16:E4:68:1F:0D:81:A7:C6:83:92:D2:5A
            X509v3 Authority Key Identifier:
                keyid:EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:0d:c5:59:c7:9d:19:ca:ce:1e:e2:d2:eb:77:90:7d:f5:
         31:a5:19:ff:a3:5a:b8:a4:d9:8e:f1:35:34:c6:21:07:69:91:
         27:eb:50:98:29:72:6f:b3:e0:99:2c:8f:9c:b2:da:96:18:ee:
         71:37:d4:f7:a0:0f:31:ce:ef:88:17:3c:c7:31:8b:45:73:88:
         ce:0b:01:2c:cc:33:b2:04:45:fa:50:5e:80:9c:64:0f:11:d2:
         16:04:f5:00:06:85:f3:11:28:9d:25:75:ef:70:b7:96:78:66:
         be:d9:e2:ac:b8:6b:c9:0e:2f:d9:b1:96:a0:a5:80:94:a2:a8:
         85:60:a9:e0:d2:54:ae:3d:53:01:55:15:27:ae:c5:f4:f4:7f:
         ea:d5:7b:d0:5f:10:b6:38:67:2c:c3:5a:e7:8f:21:a6:ac:1c:
         e4:eb:bf:61:a9:43:e1:32:e8:51:a7:dc:4e:ed:6f:9c:37:e2:
         26:82:84:0c:fd:94:7d:3a:4d:81:c7:e1:90:6e:27:b8:b7:3b:
         bc:00:c2:cb:e9:fc:c0:f7:fa:29:a1:75:f6:6b:80:a5:eb:83:
         3b:e3:f0:20:10:f2:a5:2f:8c:fb:cc:3c:d9:41:84:14:09:99:
         a1:95:e4:e0:ba:18:e0:18:5c:04:7e:a5:82:3a:3d:ad:2d:4b:
         c3:92:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:45:20 2025 by rpki-client